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Exam E 

QUESTION 1 

You work as a developer at Company.com. You are creating an assembly named Companyl. Companyl 
contains a public method. The global cache contains a second assembly named CompanyZ 

You must ensure that the public method is only called from Company2. 

Which permission class should you use? 

A. GacldentityPermission 

B. PublisherldentityPermission 

C. DataProtectionPermission 

D. StrongNameldentityPermission 

Answer: D 
Section: (none) 

Explanation/Reference: 



QUESTION 2 

You develop a service application named PollingService that periodically calls long-running procedures. These 
procedures are called from the DoWork method. You use the following service application code: 

partial class PollingService : ServiceBase 
{ 

bool blnExit = false; 

public PollingService ( ) {} 

protected override void OnStart (string [ ] args) 

{ 
do 

{ 

DoWork () ; 
} while ( IblnExit) / 
} 

protected override void OnStopO 
{ 

blnExit = true; 
} 

private void DoWork () { ...} 
} 

When you attempt to start the service, you receive the following error message: Could not start the 
PollingService service on the local computer. Error 1053: The service did not respond to the start or control 
request in a timely fashion. You need to modify the service application code so that the service starts properly. 
What should you do? 

A. Move the loop code into the constructor of the service class from the OnStart method. 

B. Drag a timer component onto the design surface of the service. Move the calls to the longrunning 
procedure from the OnStart method into the Tick event procedure of the timer, set 

the Enabled property of the timer to True, and call the Start method of the timer in the 
OnStart method. 

C. Add a class-level System. Timers. Timer variable to the service class code. Move the call to 
the DoWork method into the Elapsed event procedure of the timer, set the Enabled property 
of the timer to True, and call the Start method of the timer in the OnStart method. 



D. Move the loop code from the OnStart method into the DoWork method. 

Answer: C 
Section: (none) 

Explanation/Reference: 



QUESTION 3 

You work as a developer at Company.com. You create a service application that monitors free space on a hard 
disk drive. You must ensure that the service application runs in the background and monitors the free space 
every minute. 
What should you do? 
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Section: (none) 
Explanation/Reference: 



QUESTION 4 

You are creating an application that retrieves values from a custom section of the application configuration file. 
The custom section uses XML as shown in the following block. 

<ProjectSection name="Pro j ec t Company "> 

<role name="administrator" /> 

<role name="manager" /> 

<role name="support" /> 
</ProjectSection> 

You need to write a code segment to define a class named Role. You need to ensure that the Role class is 
initialized with values that are retrieved from the custom section of the configuration file. Which code segment 
should you use? 

A. public class Role : Conf igurationElement 



{ 



internal string ElementName = "name"; 
[Conf igurationProperty ( "role" ) ] 
public string Name 



get { return ( (string) base [ "role" ]) ; } 



B. public class Role : Conf igurationElement 
{ 

internal string ElementName = "role"; 

[Conf igurationProperty ("name" , RequiredValue = true) 
public string Name 
{ 

get { return ( (string) base [ "name" ]) ; } 
} 
} 

C. public class Role : Conf igurationElement 
{ 

internal string ElementName = "role"; 
private String name; 
[Conf igurationProperty ( "name" ) ] 
public string Name 
{ 

get { return name; } 
} 
} 

D. public class Role : Conf igurationElement 
{ 

internal string ElementName = "name"; 
private String name; 

[Conf igurationProperty ( "role" , RequiredValue = true) 
public string Name 
{ 

get { return name; } 
} 
} 

Answer: B 
Section: (none) 

Explanation/Reference: 



QUESTION 5 

You work as a developer at Company.com. You are creating an application that provides information about the 
local computer. The application contains a form that lists each logical drive with the drive properties, such as 
type, volume label, and capacity. You are required to write a procedure that retrieves properties of each logical 
drive on the local computer. What should you do? Arrange the appropriate actions in the correct order. 
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Section: (none) 
Explanation/Reference: 



QUESTION 6 

You are developing a method to call a COM component. You need to use declarative security to explicitly 
request the runtime to perform a full stack walk. You must ensure that all callers have the required level of trust 
for COM interop before the callers execute your method. Which attribute should you place on the method? 

A. [SecurityPermission (SecurityAction . Demand, Flags=SecurityPermissionFlag . 
UnmanagedCode) ] 

B. [SecurityPermission (SecurityAction . LinkDomand , Flags=SecurityPermissionFlag . 
UnmanagedCode) ] 

C. [SecurityPermission (SecurityAction .Assert, Flags = SecurityPermissionFlag . 
UnmanagedCode) ] 

D. [SecurityPermission (SecurityAction . Deny, Flags = SecurityPermissionFlag. 
UnmanagedCode) ] 

Answer: A 
Section: (none) 

Explanation/Reference: 



QUESTION 7 

You write the following custom exception class named CustomException. 

public class CustomException : ApplicationException 

{ 

public static int COR_E_ARGUMENT = unchecked ( (int ) 0x80070057 ) ; 
public CustomException (string msg) : base (msg) 

{ 

HResult = COR_E_ARGUMENT; 

} 
} 

You need to write a code segment that will use the CustomException class to immediately return control to the 
COM caller. You also need to ensure that the caller has access to the error code. Which code segment should 
you use? 

A. return Marshal . GetExceptionForHR (CustomException . COR_E_ARGUMENT) ; 

B. return CustomException . COR_E_ARGUMENT; 

C. Marshal . ThrowExceptionForHR (CustomException . COR_E_ARGUMENT) ; 

D. throw new CustomException ("Argument is out of bounds"); 

Answer: D 

Section: (none) 

Explanation/Reference: 



QUESTION 8 

You work as a developer at Company.com. You are developing an application to create a new file on the local 



file system. You need to define specific security settings for the file. You must deny the file inheritance of any 
default security settings. What should you do? 
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Section: (none) 
Explanation/Reference: 



QUESTION 9 

You are creating a class named Age. You need to ensure that the Age class is written such that collections of 
Age objects can be sorted. Which code segment should you use? 



A. public class Age 
{ 

public int Value- 
public object CompareTo (object ob j ) 
{ 

if (obj is Age) 
{ 

Age_age = (Age) ob j ; 
return Value . ComapreTo (obj ) ; 
} 

throw new ArgumentExcept ion ("object not an Age"); 
} 
} 

B. public class Age 
{ 

public int Value; 

public object CompareTo (int iValue) 
{ 

try { return Value . ComapreTo (iValue) ; } 

catch { throw new ArgumentException ("object not an Age"); } 
} 
} 

C. public class Age : IComparable 
{ 

public int Value; 

public int CompareTo (obj ect obj) 

{ 

if (obj is Age) 
{ 

Age_age = (Age) ob j ; 
return Value . ComapreTo (age .Value) ; 
} 

throw new ArgumentException ("object not an Age"); 
} 
} 

D. public class Age : IComparable 
{ 

public int Value; 

public int CompareTo (obj ect obj) 

{ 

try { return Value . ComapreTo (( (Age) obj). Value); } 

catch { return -1; } 
} 
} 

Answer: C 
Section: (none) 

Explanation/Reference: 



QUESTION 10 

You are developing an assembly to access file system. Need to write a segment code to configure CLR stop 
loading the assembly if file permssion is absent. 

A. [FilelOPermission(SecurityAction.RequestOptional, AIILocalFiles = FilelOPermissionAccess.Read)] 

B. [FilelOPermission(SecurityAction.RequestMinimum, AIIFiles = FilelOPermissionAccess.Read)] 



C. [FilelOPermission(SecurityAction.RequestRefuse, AIIFiles = FilelOPermissionAccess.Read)] 

D. [FilelOPermission(SecurityAction.RequestOptional, AIIFiles = FilelOPermissionAccess.Read)] 

Answer: B 
Section: (none) 

Explanation/Reference: 



QUESTION 11 

Given the code like this: 

while ( ! loop) 
{ 

//Thread code here 

Dowork ( ) ; 
} 

You need to write more code to class to run DoWork() with 30-second intervals using minimum resources 

A. Thread. Sleep(30000) 

B. Thread.SpinWait(30000) 

C. Thread. QueueUserWorkltem(30000) 

D. Thread.SpinWait(30) 

Answer: A 
Section: (none) 

Explanation/Reference: 



QUESTION 12 

You are developing an application that will deploy by using ClickOnce. You need to test if the application 
executes properly. You need to write a method that returns the object, which prompts the user to install a 
ClickOnce application. Which code segment should you use? 

A. return ApplicationSecurityManager.ApplicationTrustManager; 

B. return AppDomain.CurrentDomain.ApplicationTrust; 

C. return new HostSecurityManager(); 

D. return SecurityManager.PolicyHierarchy(); 

Answer: A 
Section: (none) 

Explanation/Reference: 



QUESTION 13 

You create a DirectorySecurity object for the working directory. 

You need to identify the user accounts and groups that have read and write permissions. 

Which method should you use on the DirectorySecurity object? 



A. the GetAuditRules method 

B. the GetAccessRules method 

C. the AccessRuleFactory method 

D. the AuditRuleFactory method 

Answer: B 
Section: (none) 

Explanation/Reference: 



QUESTION 14 

You are developing an auditing application to display the trusted ClickOnce applications that are installed on a 

computer. 

You need the auditing application to display the origin of each trusted application. 

Which code segment should you use? 

A. ApplicationTrustCollection trusts; 

trusts = ApplicationSecurityManager .UserApplicationTrusts ; 

foreach (ApplicationTrust trust in trusts) 

{ 

Console . WriteLine (trust . ToString ( ) ) ; 

} 

B. ApplicationTrustCollection trusts; 

trusts = ApplicationSecurityManager .UserApplicationTrusts; 
foreach (ApplicationTrust trust in trusts) 

{ 

Console .WriteLine (trust .Extralnfo . ToString ( ) ) ; 

} 

C. ApplicationTrustCollection trusts; 

trusts = ApplicationSecurityManager .UserApplicationTrusts ; 
foreach (ApplicationTrust trust in trusts) 

{ 

Console .WriteLine (trust . Applicationldentity . FullName) ; 
} 

D. ApplicationTrustCollection trusts; 

trusts = ApplicationSecurityManager .UserApplicationTrusts; 
foreach (object trust in trusts) 

{ 

Console .WriteLine (trust . ToString ( ) ) ; 

} 

Answer: C 
Section: (none) 

Explanation/Reference: 



QUESTION 15 

You are developing an application that stores data about your company's sales and technical support teams. 

You need to ensure that the name and contact information for each person is available as a single collection 

when a user queries details about a specific team. 

You also need to ensure that the data collection guarantees type safety. 

Which code segment should you use? 



A. Hashtable team = new HashtableO 
team.Add(l, "Hance") ; 

team. Add (2, "Jim") ; 

team.Add(3, "Hanif") ; 

team.Add(4, "Kerim") / 

team.Add(5, "Alex") / 

team.Add(6, "Mark") ; 

team.Add(7, "Roger") ; 

team. Add (8, "Tommy") / 

B. ArrayList team = new ArrayListO 
team . Add ("1, Hance " ) ; 

team. Add ("2, Jim") ; 

team.Add("3, Hanif") ; 

team. Add ("4, Kerim") ; 

team.Add("5, Alex") ; 

team.Add("6, Mark") ; 

team.Add("7, Roger") ; 

team.Add("8, Tommy") ; 

C. Dictionary<int, string> team : 
team. Add (1, "Hance") ; 
team. Add {2, "Jim") ; 
team. Add (3, "Hanif") ; 
team.Add(4, "Kerim") ; 
team.Add(5, "Alex") ; 
team.Add(6, "Mark") ; 
team.Add(7, "Roger") ; 
team. Add (8, "Tommy") ; 

D. string [ ] team = new string [] 
Alex", "6, Mark", "7, Roger", 



new Dictionary<int, string>(); 



"1, 



Hance" , 
Tommy" } , 



"2, Jim", "3, Hanif", "4, Kerim", "5, 



Answer: C 
Section: (none) 

Explanation/Reference: 



QUESTION 16 

You create Microsoft Windows-based applications. 

You create an application that requires users to be authenticated by a domain controller. 

The application contains a series of processor intensive method calls that require different database 

connections. 

A bug is reported during testing. 

The bug description states that the application hangs during one of the processor-intensive calls more than 50 

percent of the times when the method is executed. 

Your unit test for the same method was successful. 

You need to reproduce the bug. 

Which two factors should you ascertain from the tester? (Each correct answer presents part of the solution. 
Choose two.) 



A. Security credentials of the logged on user 

B. Code access security settings 

C. Hardware settings 

D. Network settings 



E. Database settings 

Answer: DE 
Section: (none) 

Explanation/Reference: 



QUESTION 17 

You are a Web developer for Contonso. You are creating an online inventory Web site to be used by 

employees in Germany and the United States. 

When a user selects a specific item from the inventory, the site needs to display the cost of the item in both 

United States currency and German currency. 

The cost must be displayed appropriately for each locale. 

You want to create a function to perform this task. 

Which code should you use? 

A. private string CKGetDisplayValue (double value, string inputRegion) 
{ 

string display: 

Regionlnfo region; 

region = new Regionlnfo (inputRegion) ; 

display = value . ToString ("C") ; 

display += region . CurrencySymbol; 

return display; 

} 

B. private string CKGetDisplayValue (double value, string inputCulture) 
{ 

string display; 

NumberFormatlnf o LocalFormat = (Number Forma tlnf o) Number Format Info . Current Info . 

Clone () ; 

display = value . ToString ("C", LocalFormat); 

return display; 

} 

C. private string CKGetDisplayValue (double value, string inputRegion) 
{ 

string display; 

Regionlnfo region; 

region = new Regionlnfo (inputRegion) ; 

display = value . ToString ("C") ; 

display += region . ISOCurrencySymbol; 

return display; 

} 

D. private string CKGetDisplayValue (double value, string inputCulture) 
{ 

string display; 

Culturelnfo culture; 

culture = new Culturelnfo (inputCulture) ; 

display = value . ToString ("C", culture); 

return display; 



Answer: D 
Section: (none) 

Explanation/Reference: 



Explanation: We create a new Culturelnfo object based on the inputCulture parameter. We then produce the 

result with "C" constant, representing the current culture, and the new Culturelnfo object: display = 

value. ToStringfC", culture) 

Note: The Culturelnfo Class contains culture-specific information, such as the language, country/region, 

calendar, and cultural conventions associated with a specific culture. This class also provides the information 

required for performing culture-specific operations, such as casing, formatting dates and numbers, and 

comparing strings. 

Incorrect Answers 

B: The NumberFormatlnfo class defines how currency, decimal separators, and other numeric symbols are 

formatted and displayed based on culture. However, we should create a Culturelnfo object, not a 

NumberFormatlnfo object). 

A, C: We should use the Culturelnfo class not the Regionlnfo class. 

Note: In contrast to Culturelnfo, Regionlnfo does not represent preferences of the user and does not 

depend on the user's language or culture. 

QUESTION 18 

You work as the application developer at Hi-Tech.com. You create a new custom dictionary named 
MyDictionary. 

Choose the code segment which will ensure that MyDictionary is type safe? 

A. Class MyDictionary Implements Dictionary (Of String, String) 

B. Class MyDictionary Inherits HashTable 

C. Class MyDictionary Implements IDictionary 

D. Class MyDictionary 
End Class 

Dim t qo Now Dictionary (Of String; String) 

Dim diet Ao MyDictionary- CTypo — (t ; MyDictionary) 

Answer: A 
Section: (none) 

Explanation/Reference: 



QUESTION 19 

What kind of object does the generic Dictionary enumerator return? 

A. Object 

B. Generic KeyValuePairt object 

C. Key 

D. Value 



Answer: B 
Section: (none) 

Explanation/Reference: 



QUESTION 20 

Which event would you use to run a method immediately before deserialization occurs? 

A. OnSerializing 



B. OnDeserializing 

C. OnSerialized 

D. OnDeserialized 

Answer: B 
Section: (none) 

Explanation/Reference: 



QUESTION 21 

You work as the application developer at Cert-Tech.com. Cert-Tech.com uses Visual Studio. Net 2005 as its 

application development platform. You use a Windows XP Professional client computer named ClientOI as 

your development computer. 

You are developing a .Net Framework 2.0 application on ClientOI. You write the code shown below: 

Public Class Shape 

Private shapeName as String 

Public Sub Shape(ByVal shapeName as String) 

Me.shapename=shapeName 

End Sub 

Public Overridable Fuction GetName() As String 
Return shapeName 
End Function 

Private Sub DrawShape() 
'Additional code goes here 
End Sub 
End Class 

You later decide to have the application compiled and registered for COM interoperability. The other developers 

on your team complaing that they are unable to create an instance of the Shape class in their COM 

applications. You are required to ensure that COM applications are able to create an instance of the Shape 

class. 

What should you do? 

A. The following code should be added to the Shape class: 
Public Sub New() 

End Sub 

B. The following ComVisible attribute to the Shape class: 
<ComVisible(True)> 

C. The definition of the GetName method should be modified as below: 
Public Function GetName() As String 

Return shapename 
End Function 

D. The follwoing ComVisible attribute should be added to each method of the Shape class: 
<ComVisible(True)> 

Answer: A 
Section: (none) 

Explanation/Reference: 



QUESTION 22 

You deploy several .NET-connected applications to a shared folder on your company network. Your 
applications require full trust to execute correctly. Users report that they receive security exceptions when they 
attempt to run the applications on their computers. You need to ensure that the applications on the users 
computers run with full trust. What should you do? 

A. Apply a string name to the applications by using the Strong Name tool (Sn.exe) 

B. Use the security settings of internet explorer to add the shared folder to the list of trusted sites 

C. Use the Code Access Security Policy tool (Caspol.exe) to add a new code group that has the full trust 
permission set. The new code group must also contain a URL membership condition that specifies the URL 
of the shared folder where your application reside 

D. Grant the full trust permission set to the Trusted Zone code group by using the Code Access Security Policy 
Tool (Caspol.exe) 

Answer: C 
Section: (none) 

Explanation/Reference: 



QUESTION 23 

Which methods allow COM components to be used in .NET applications? (Choose all that applay.) 

A. Add a reference to the component throudh Microsoft Visual Studio 2005. 

B. Use the type Library Import tool (Tlblmport.exe). 

C. Use the Regsvr32 tool. 

D. Ensure thet the application is registered, using the RegSvr tool if necessary. Then either add a reference to 
it from the COM tab of the Add Reference dialog box or use Tbllpm.exe. 

Answer: ABD 
Section: (none) 

Explanation/Reference: 



QUESTION 24 

What types of objects derive from te Memberlnfo class? (Chose all that applay.) 

A. Fieldlnfo class 

B. Methodlnfo class 

C. Assembly class 

D. Type class 

Answer: ABD 
Section: (none) 

Explanation/Reference: 



QUESTION 25 



When compressing data with the DeflateStream class, how do you specify a stream into which to write 
compressed data? 

A. Set the BaseStream property with the destination stream, and set the CompressionMode property to 
Compression. 

B. Specify the stream to write into the DeflateStream object is created (for example, in the constructor). 

C. Use the Write method of the DeflateStream class. 

D. Register for the BaseSream event of the DeflateStream class. 

Answer: B 
Section: (none) 

Explanation/Reference: 



QUESTION 26 

Where can you add to a LinkedList? (Choose all that apply) 

A. At the begining of the LinkedList 

B. Before any specific node 

C. After any specific node 

D. At the and of the LinkedList 

E. At any numeric index in the LinkedList 

Answer: ABCD 
Section: (none) 

Explanation/Reference: 



QUESTION 27 

Which event would you use to run a method immediately after serialization occurs? 

A. OnSerializing 

B. OnDeserializing 

C. OnSerialized 

D. OnDeserialized 

Answer: C 
Section: (none) 

Explanation/Reference: 



QUESTION 28 

You need to write a code segment that will add a string named strConn to the connection string 
section of the application configuration file. Which code segment should you use? 

A. Configuration myConfig = ConfigurationManager.OpenExeConfiguration( ConfigurationUserLevel.None); 
myConfig.ConnectionStrings.ConnectionStrings.Add( new ConnectionStringSettings("ConnStr1 ", strConn)); 
myConfig. SaveQ; 



B. Configuration myConfig =ConfigurationManager.OpenExeConfiguration( ConfigurationUserLevel.None); 
myConfig.ConnectionStrings.ConnectionStrings.Add( new ConnectionStringSettings("ConnStr1",strConn)); 
ConfigurationManager.RefreshSection( "ConnectionStrings"); 

C. ConfigurationManager.ConnectionStrings.Add( new ConnectionStringSettings("ConnStr1 M ,strConn)); 
ConfigurationManager.RefreshSection( "ConnectionStrings"); 

D. ConfigurationManager.ConnectionStrings.Add( new ConnectionStringSettings("ConnStr1 ",strConn)); 
Configuration myConfig = ConfigurationManager.OpenExeConfiguration( ConfigurationUserLevel.None); 
myConfig. Save(); 

Answer: A 
Section: (none) 

Explanation/Reference: 



QUESTION 29 

You are developing an application that uses role-based security. The prinicipal policy of the application domain 
is configured during startup with the following code: 

AppDomain . Cur rent Domain .SetPr in cipal Policy (Principal Pol icy. Windows Principal ) ; 

You need to restrict access to one of the methods in your application so that only members of the local 
Administrators group can call the method. 

Which attribute should you place on the method? 

A. [PrincipalPermission (SecurityAction . Demand, Name = @"BUILTIN\Administrators") ] 

B. [PrincipalPermission (SecurityAction . Demand, Role = @"BUILTIN\Administrators") ] 

C. [PrincipalPermission (SecurityAction .Assert , Name = @"BUILTIN\Administrators") ] 

D. [PrincipalPermission (SecurityAction .Assert , Role = @ "BUILTIN\Administrators" ) ] 

Answer: B 
Section: (none) 

Explanation/Reference: 



QUESTION 30 



You work as the application developer at Cer-Tech. com. Cer-Tech.com uses Visual 
Studio.NET 2005 as its application development platform, 

You are developing a . NET Framework 2 r text manipulation application. You make use of 
the code below in your application: 

Dim ckRuildor As SiringBui ldr>r = Kv.w StHngBui ldor (*: siring:*) 
Dim bO As Char = {*Wc, *b*c 3 "c"c ? "d"c> "e^Cj "fc, *Vc} 
Dim ckWriter As StringWriter = New StringWriter (ckRuildcr) 
ckWriter. Write (b s G 5 3) 
Consol e + Wri teLi ne {ckBu i lder) 

ck'J-iU:-. riiJSi- 

You are required to select from the following what the output will be when you execute 
the application. 

What should you do? 

A string :abcdefg 

abc: string 
abestring 
D string :abc 

Answer: D 
Section: (none) 

Explanation/Reference: 
QUESTION 31 



Which class would you use to programmatically access the connection strings stored in the following configuration file? 

<?Kml version="1.0" encoding="utf-8 M ?> 
< configuration 

< connections trings> 
<clear/> 

< add name=' 'AdventureWorksS tring 1 ' 

providerN arine="Sy stem. D ata. S qlClient" 

connectionString="Data Source=localhost;lnitial Catalog=AdventureWorks; Integrated Security=true'V> 
<add name="MarsEnabledSqlServer2005S tring" 

providerN arine="Sy stem. D ata. S qlClient" 

connectionString="Server=Aron1;Database=pubs;Trusted_Connection=True;MultipleActiveResultSets=true" /> 
<add name="OdbcConnectionS tring" 

providerN ame="System. D ata. dbc" 

connectionString="Driver={Microsoft Access Driver ( K .mdb)};Dbq=C:\adatabase.mdb;Uid=Admin;Pwd=R3m3emberToUseStrongPasswords; , 7> 

< /connections trings> 
< /configuration 



A. 



ConfigurationManager.ConnectionStrings 



y - ConfigurationProperty.ConnectionS trings 
C. Configurations ettings. Connections trings 

ConfigurationSection.ConnectionS trings 

Answer: A 

Section: (none) 

Explanation/Reference: 

Use ConfigurationManager.ConnectionS trings to access database connection strings. 

ConfigurationSettings is obsolete. 

ConfigurationSection does not have a Connections trings property. 

ConfigurationProperty does not have a Connections trings property. 



QUESTION 32 

Which of the following commands adds the App.exe assembly to the full trust list for the machine policy? 



A. 



Caspol -machine -addfulltrust App.ewe 



B. Caspol -machine -addgroup Full_Trust App.eae 

C- Caspol -user -addfulltrust App.ewe 

D - Caspol -user -addgroup Full_Trust App.ewe 

Answer: A 
Section: (none) 

Explanation/Reference: 

the -machine and -addfulltrust arguments with the Caspol. ewe command-line tool to add an assembly to the full trust list for the machine polic 

-user argument adds the assembly to the user full trust list, not the machine full trust list, 
cannot use the -addarouo araument to add an assemble to the full trust list. 



QUESTION 33 

You are creating a class that responds to serialization events. Which of the following classes will trigger the serialization events? 

A - iBinaryFormatter I 

B - SoapFormatter 

C. XnnlSerializer 

D. I Formatter 

Answer: A 
Section: (none) 

Explanation/Reference: 

Only the BinaryFormatter class supports serialization events. 

The SoapFormatter class does not support serialization events. 

XMLSerializer does not support serialization events. 

Formatter is an interface and cannot be directly used to perform serialization. 

QUESTION 34 

You are writing an application that communicates with a database. The connection string is stored in the application configuration file. Which of the following 
string? 

A - 'VB 

ConfigurationManager.ConnectionStrings. Connections tring 

//Ctt 

ConfigurationManager.ConnectionStrings. Connections tring 

B - 'VB 

Configurations ettings. Connections trings. Connections tring 

//Ctt 

Configurations ettings. Connections trings. Connections tring 



C. 



'VB 

ConfigurationManager. Connections trings(O). Connections tring 

//Ctt 

ConfigurationManager.ConnectionStrings[0], Connections tring 



D. -VB 

Configurations ettings.ConnectionStrings(O). Connections tring 

//Ctt 

Configurations ettings.ConnectionStrings[0], Connections tring 



Answer: C 
Section: (none) 



Explanation/Reference: 

ConfigurationManager. Connections trings is a collection of type Connections tringSettingsCollection that contains the connection strings loaded from the appli 
collection, you must access it using an index. Configurations ettings, which is obsolete, does not contain a Connections trings property. 

Exam Objective: 

Embedding configuration, diagnostic, management, and installation features into a .NET Framework application 

Exam SubObjective(s): 

Embed configuration management functionality into a .NET Framework application. (Refer System. Configuration namespace) Configuration class and Configi 

QUESTION 35 

Which of the following configuration files correctly defines the information required to connect to a database by defining the first element of ConfigurationMan 
other configuration files that might exist? 

A. <?xmlversion="1.0" encoding= M utf-8 M ?> 
<configuration> 

<connectionStrings> 

<clear/> 

<add name=" System. Data . SqlClient" 

pro vide rName="AdventureWorks String" 

connectionString="Data Source=localhost; Initial Catalog=AdventureWorks; 

Integrated Security=true"/> 
</ connect ionStrings> 
</conf iguration> 

B. <?xmlversion="1.0" encoding="utf-8" ?> 
<conf iguration> 

<connectionStrings> 

<add name="System. Data . SqlClient" 

pro vide rName="AdventureWorksString" 

connectionString="Data Source=localhost ; Initial Catalog=AdventureWorks ; 

Integrated Security=true"/> 
</ connect ionStrings> 
</conf iguration> 

C. <?xmlversion="l . 0" encoding="utf-8" ?> 
<configuration> 

<connectionStrings> 

<add name="AdventureWorksString" 

providerName="System. Data . SqlClient" 

connectionString="Data Source=localhost; Initial Catalog=AdventureWorks ; 

Integrated Security=true"/> 
</ connect ionStrings> 
</conf iguration> 

D. <?xmlversion="l . 0" encoding="utf-8" ?> 
<configuration> 

<connectionStrings> 

<clear/> 

<add name="AdventureWorksString" 

providerName="System. Data . SqlClient" 

connectionString="Data Source=localhost ; Initial Catalog=AdventureWorks ; 

Integrated Security=true"/> 
</ connect ionStrings> 
</conf iguration> 

Answer: D 
Section: (none) 



Explanation/Reference: 

To define the first element of ConfigurationManager.ConnectionStrings, you must include the <clear/> element, which removes any existing <connectionStrir 
providerName attribute to the database type, such as System.Data.SqICIient. The Name element is a friendly name used to refer to that specific connection t 

Exam Objective: 

Embedding configuration, diagnostic, management, and installation features into a .NET Framework application 

Ewam SubObiective(s): 

Embed configuration management functionality into a .NET Framework application. (Refer System.Configuration namespace] Configuration class and Configi 



QUESTION 36 

You are writing a multithreaded application, and multiple threads need to read and write the same file. At times, a thread will need to read from the file, and th 
most efficient way to handle this in the thread? 

A. 1 . Create a ReaderWriterLock object, and call ReaderWriterLock.AcquireReadLock. 

2. Perform the reads. -^^^^^^^^^^^_^^^^^^^^^^^_ 

3. Call ReaderWriterLocklUpgradeToWriterLock, and perform the writes. I 

B. 

1. Create a ReaderWriterLock object, and call ReaderWriterLock.AcquireReadLock. 

2. Perform the reads. 

3. Call ReaderWriterLock. ReleaseReaderLock. 

4. Call ReaderWriterLock.AcquireWriteLock, and perform both the writes. 

C. 

1. Create a ReaderWriterLock object, and call ReaderWriterLock.AcquireReadLock. 

2. Perform the reads. 

3. Call ReaderWriterLock. ReleaseLock. 

4. Call ReaderWriterLock.AcquireWriteLock, and perform both the writes. 

D. 

1. Create a ReaderWriterLock object, and call ReaderWriterLock. AcquireWriteLock. 

2. Perform both the reads and the writes. 

Answer: A 
Section: (none) 

Explanation/Reference: 

The most efficient way to switch from a read lock to a write lock is to call ReaderWriterLock. UpgradeToWriterLock. 

You cannot read when you have a write lock. 

Although you can release a read lock and acquire a write lock, it is not as efficient as using UpgradeToWriterLock. 



QUESTION 37 



You work as the application developer at Cer-Tech. com. You make use of Visual Studio 
2005 as your application development platform. 

You are developing a .NET Framework 2.0 application and write the code below as your 
own code; 

Publ ic Class Book 
Public (Name As String 
End Class 

Public Class Library 
<XmlArayriDr)> 
<XmlArayTtemrrD2")> 
Publ ic Hook As BookO 
End Class 

You are required to cream an object of the Library type and serialize it to disk in 
a file named Certkiller books.sml and write the following code: 

Dim books As BookO = New BookO {New BookO, New BookO, ISw BookO} 

books (0) . Name - "Bonk Name 1 * 

books (1). Name = "Book Name 2* 

books (2) . Name = "Book Name 3" 

Dim library As Library = New LibraryO 

library* Books = books 

Dim ckSerializer As XmlSerializer = New XmlSerializer(GerType( library)) 

Using ckffriter As StreamWriter = New Streamer iterC Certkiller books, xml") 
ckSerializer. Serialize (ckffriter, library) 
End Using 

You are required to choose from the following selection which output will be generated 

by the program. 

What should you do? 



<Library> 
<IM> 

<Book> 

<ID2>Book Name l</][)2> 

</Book> 

Otook> 

<ID2>Book Name 2</ID2> 
</Book> 
Hook 

<ID2>Book Name 3</ID2> 
</Book> 

in 
</Library> 



B. 



<Library> 

<Books> 

1)1 - 
<ID2>Itoak Xante 1</ID2> 
-, -1)1 > 

Ml 
<TD2>Book Name 2</ID2> 

'HI 
<ID1> 
<ID2>Book Name 3</ID2> 

"HI 
</Eooks> 
</Library> 



c. 


<Library> 


<TD2> 


<IM> 


■^amo^Rook Name K/Name> 


"HI 


<ID1> 


<Namc>Book Nfimc 2</Namc> 


</IDl 


<ID1> 


<Name>Book Name 3</Name> 


in • 


"ir 




■ /Library 


D. 


^r.ibrary^ 




<IM> 




i yi 




'\aiut>>Rook Namo l</Kamo> 


-.. ■]):>> 


<TD2> 


<Name>Book Name 2</Name> 


-, \v>> 


i yi ■• 


<\amt?>Bnok Kfimo H</Name> 


- 'D:: •■ 


., HI • 


</Library> 


Answer: D 


Sec 


tion: (none) 



Explanation/Reference: 



QUESTION 38 



You work as an application developer at Cer-Tech.com. The Cer-Tech, com network 
contains an application server name J ServnrOI. 

You have been asked to profile a business application that can be accessible using the 
Event Log API. You want to achieve this by creating a custom event log on Serve rOL 

What should you do? 

Use the following code: 
EventLog.CreateEventSource C Application!*, ^Profile*, "ServerDO ; 



B. 



Lfc Llic loll owing code: 
Fvcnll.og. CrcFitcEvent Source ("Appl icaLiotil", "Proi'ilc") ; 

Use the following code: 
EventSourceCreat ionData sourceData = new EventSourceCreat ionData 



("Application!", "Profile*) ; 

sour cc Data. MnchinoPsama = "ScrvcrOT 



Even t Log, Cr eateB v en i Sou rce ( sour c eDat a) ; 
D- Use the following code: 

EventSourceCreat ionData sourceData = new Event Sour ceCreat ionData 

("Application!", "Profile") ; 

EventLog, CreateEventSource {sourceData) ; 

Answer: C 
Section: (none) 

Explanation/Reference: 



QUESTION 39 

You need to notify the user if your assembly is running without the ability to use 
HTTP to download assemblies. How can you determine whether you have that permission? 



A. 

Exam i no AppDnma i u. CurrotUDomai n 



So lupin formal inn. Disal lowCndn Down load. 



B. 

Exam I no AppDmain. Curront Domain. DisallowtodoDrmiload. 

C. 

Ex am i n c AppDorna i ti. Cu r r c n LDoma i n . t>c I u p T n ] o rma L i o n. I) i $ al 1 ouPuh 1 i she rPo 1 i c y . 

Examine AppDomaitL Current Domain. DisallowPublisherPolicy, 
Answer: A 



Section: (none) 
Explanation/Reference: 

QUESTION 40 

Which method is appropriate to specify a password when starting a process? 



Use a String variable that contains the password. 

B. 

Use an Array of type Char 

C- . Use an Array of type String coupled with an Integer reference to the password' s index 
in the array. 

D. 



Use a 



ScjcureSLririg object. 



Answer: D 
Section: (none) 

Explanation/Reference: 



QUESTION 41 



You work as the application developer at Cer-Tech.com. Cer-Tech.com uses Visual 
Studio.NET 2005 as its application development platform. 

You are developing a .NET Framework 2.0 application and are busy creating a default 
instance of the Ri jndael symmetric algorithm class and configure it with a key that is 
generated from a passwords The following code you wrote, lino numbers are for reference 

only: 

01: Dim dubl As Double = 

02: Dim salt (16) As Byte 

03: Dim pwdDeBytes As PasswordDeriveBytes = New PasswordDeriveBytes (pwd f salt) 

04: Dim key As ByteO = pwdDeBytes. GetBytesC 16) 

05: Dim cryptoRij As Ri jndael = Ri jndael. Create 

06: cryptoRij.Rey = key 

The variable that is named salt acts as a seed to the key derivation algorithm. You are 
required to insert additional code before line 03 that stores a random number in the 
salt variable. 

What code segment should you add? 



Dim rtfum As 

r Num. Ge tBy t e s { sal t ) 
B. 



Rnr i d oniV imbc rG en u ru 1 o r 



= RandomNumber&ener at or. Create 



Dim ckGuid as Guid = New Guid 

salt = ckGuid, ToByteArrayO 

Dim enc as Encoding = New ASCIIEncoding 

salt = enc. Get Bytes (Da teTi me. Now. ToStringO) 

D. 

Dim rXum ns Random = P*cw Random 

rNuoh NextBytes (salt) 

Answer: A 
Section: (none) 

Explanation/Reference: 
QUESTION 42 



. You are creating a generic class, and you need to dispose of the 
Hou r can jrou do this? 



A 

Call the Object. Dispose method. 

B. 

Implement the IDisposablc inter face, 

C. 

Derive the generic class from the [Disposable class. 



generic objects. 



D. 



Usn constraints to roquira the £ont}.ric typn 



to implement the IDisposable interface, 



Assembly Bui ldcrAcccss 



Answer: D 
Section: (none) 

Explanation/Reference: 



QUESTION 43 

What values of the 

assembly? 



A - As sembl y Bu i 1 der Ac cess IRun 

AsseiiblyBuilderAcccss. RcilectionUnly 

C. AsscmblyBui iderAccoss JRmiAridSavo 

D. 

AssemblyBuilderAceess^ Save 

Answer: AC 
Section: (none) 

Explanation/Reference: 



QUESTION 44 



enumeration allow you to execute the 



You work as the application developer at Cer-Tech. com. Cer-Tech.com uses Visual 
Studio.NET 2005 as its application development platform. 
You are developing a .NET Framework 2.0 Windows application. You are required to 

asynchronously monitor the creation of new Windows processes and write the following 
code: 

Dim otkiory As ^14! Evmt Quo ry - Now WL|lEvr>nl(juary (" TnstancoCrealionEvent^ 

New TimeSpan (0, S 5), ^Target Instance is a J ^Win32_Process J *" / *) 
Dim meWatcher As Management Event Watcher = New WanagementEventWatcher {) 
moWalchcr. Query = ctjucry 

You are in the process of adding additional code for the asynchronous monitor to work 
and need to know which code segment to use. 

What code segment should you use? (Each correct answer presents part of the solution, 
Choose TWO) 

A - nicWatcher. Stop 

B - Dim mObj As ManflgcroiGntBascObjocl = nifiWatchor. ffai iForXGXi Event {) 
C. 



mcWatchcr. ULarL 



y dl landler meWa tchei . Eve n t Arr i v ed, Addres sOf Pr oce s s_Cr eat e d 



Answer: CD 
Section: (none) 

Explanation/Reference: 



QUESTION 45 

Which of the following is a class would you need to create an instance of to specify 
that a string should be centered when drawn? 



A. 
B. 



SlringFormaL 



S 1 r i ngA I i gnmen 1 

c - Format Flags 

D. 

LlneAlignment 

Answer: A 



Section: (none) 
Explanation/Reference: 



QUESTION 46 

Which of the following are kejred hashing algorithms? (Choose all that apply, ) 



A. 

B. 
C. 

D. 

E. 



RlPKMDieO 



HHACSHAI 



|f;m.u"S:I\: I 



SHA512 



MACTriplcDES 



MD5 



Answer: BD 
Section: (none) 

Explanation/Reference: 



QUESTION 47 

You work as the application developer at Cer-Tech.com. Cer-Tech.com uses Visual 

Studio, NET 2005 as its application development platform. 

You are developing a .NET Framework 2.0 assembly using the code shown below: 

Public Not Inheritable Class UtilProc 

Puhl ic Sub DoWorkO 

? Additional carle to go here 

End Sub 

End Class 

The code is capable of being called by a Web application or Web service. You are required 
to restrict the assemblies that are capable of calling the DoWork method so only 
assemblies signed with a sparine public key should be able to call the DoWork method. 



li'haL should vou do? 



A. 
B. 



Seeur i tyAf.L inn. Li ukDomand 



The 1 StrongNameldentitjrPermission 



should be passed as a parameter in the attribute 

attribute should be applied to the Doffork method 



Q 

Sccuri tyActiori. Fnhcri tanccDcmand should he passed as a parameter to the attribute 

D. 

The SecurityAct ion. Demand should be passed as a parameter to the attribute 

The Ganldenti tyPermissieti should tie applied to the DoWork method 
The KeyContainerPermission should be applied to the DoWork method 

Answer: AB 
Section: (none) 

Explanation/Reference: 



QUESTION 48 

Which permission must ati assembly have to connect to n Web server? 

A 

SockctPurmisKioTi 



B. 



WebPcrmissioti 



c - DtisPermission 

D. KerviceControllerPermission 

Answer: B 
Section: (none) 

Explanation/Reference: 



QUESTION 49 

Which of the following would you use within a method to throw an exception if the 

assembly lacked a specific privilege? 



Socuri tyActionl Demand 



B- SecurityAct ion. Deny 

c SecurityAct ion. Assert 

D. 

SecurityAct ion. RequestMinioiuni 



Answer: A 
Section: (none) 

Explanation/Reference: 



QUESTION 50 

You work as an application developer at Cer-Tech.com. You are in the process of 
creating an assembly that will be used to manage file content on Cer-Tech. com 1 s user 

computers. 

Cer-Tech. com wants you to ensure that the users who use the assembly you are creating 
should not be able to access classes in your assembly if they do not have access to the 
local file system. 

To do this, you need to add certain code fragments to your classes. What should you use? 

(Choose two) 



[FilelOPermission (SecurityAction. RequestMinimum) , 

FilelOPermission perm = New FilelOPermission (Fermi ssionState, Unrestricted) ; 
Perm. Assert 

C. 

[F i 1 e 1 OP g rm i s s i on (Secur i t y Ac t i on. R eque s tOp t i ona 1 ) ] 

FilelOPermission perm = New FilelOPermission {PermissionState, Unrestricted.) ; 
Perm. Request 

E. 



[Fi 1 elOPermi ssion 

F. 



(iiccur I LyAc Li on. Demand) 



] 



FilelOPermission perm = New FilelOPermission (Permissions tate. Unrestricted) ; 

| Pnrm. Dpiufnid| 

Answer: EF 
Section: (none) 

Explanation/Reference: 



QUESTION 51 

You write the following code segment to call a function from the Win32 Application Programming Interface 

(API) by using platform invoke. 

string personName = "N?el"; 

string msg = "welcome " + personName + "to club"!; 

bool re = User32API.MessageBox(0, msg, personName, 0); You need to define a method prototype that can 

best marshal the string data. 

Which code segment should you use? 

A. [Dlllmport("user32", CharSet = CharSet.Ansi)] 

public static extern bool MessageBox(int h Wnd, String text, 
String caption, unit type); 



B. [Dlllmport("user32 M , EntryPoint = "MessageBoxA", CharSet = CharSet.Ansi)] 

public static extern bool MessageBox(int hWnd, [MarshalAs(UnmanagedType.LPWStr)]String text, 

[MarshalAs(UnmanagedType.LPWStr)] 

String caption, unit type); 

C. [Dlllmport("user32 M , CharSet = CharSet.Unicode)] 

public static extern bool MessageBox(int h Wnd, String text, String caption, unit type); 

D. [Dlllmport("user32 M , EntryPoint = "MessageBoxA", CharSet = CharSet.Unicode)] 

public static extern bool MessageBox(int hWnd, [MarshalAs(UnmanagedType.LPWStr)]String text, 

[MarshalAs(UnmanagedType.LPWStr)] 

String caption, unit type); 

Answer: C 
Section: (none) 

Explanation/Reference: 

■ Achtung: CharSet = CharSet.Unicode wird empfohlen, da in C# CharSet.Auto eventuell Probleme macht. 

■ CharSet.Ansi ist naturlich fasch (string in C# ist Unicode) 

QUESTION 52 

A fellow developer named Andy Booth has recently created an application. 

The application receives confidential transaction data from Certkiller .corn's clients, which it secures using the 

TripleDESCryptoServiceProvider class. 

You are currently reviewing this application, and need to decrypt a byte array of cipher text. 

What code should you use to achieve this objective? 

A. public byte [] DecryptData(byte [] cipherText, TripleDESCryptoServiceProvider secretKey){ 
MemorySream ms = new MemorySream(cipherText); 

CryptoSream cs = new CryptoSream(ms, SecretKey, CryptoSreamMode.Read); 

byte [] data = new byte [ms. Length - 1]; 

cs.Read (data, 0, data. Length); 

cs. Close (); 

ms. Close (); 

return data; 

} 

B. public byte [] DecryptData(byte [] cipherText, TripleDESCryptoServiceProvider secretKey){ 
MemorySream ms = new MemorySream (cipherText); 

CryptoSream cs = new CryptoSream(ms, secretKey.CreateDecryptor(), CryptoSreamMode.Read); 

byte [] data = new byte [ms. Length - 1]; 

cs.Read (data, 0, data. Length); 

cs. Close (); 

ms. Close (); 

return data; 

} 

C. public byte [] DecryptData(byte [] cipherText, TripleDESCryptoServiceProvider secretKey){ 
MemorySream ms = new MemorySream (secretKey); 

CryptoSream cs = new CryptoSream(ms, secretKey. CreateDecryptor(), CryptoSreamMode.Read); 

byte [] data = ms. Decrypt (cipherText); 

cs.Read (data, 0, data. Length); 

ms. Close (); 

return data; 

} 



D. public byte [] DecryptData(byte [] cipherText, TripleDESCryptoServiceProvider secretKey){ 
CryptoSream cs = new CryptoSream (secretKey); 
byte [] data = ms. Decrypt (cipherText); 
cs.Read (data, 0, data. Length); 
ms. Close (); 
return data; 
} 

Answer: B 
Section: (none) 

Explanation/Reference: 

This code instantiates a CryptoStream object, specifies the ICryptoTransform object to encrypt data, decrypts 

the CipherText byte array, 

and returns the encrypted byte array. 

The TripleDESCryptoServiceProvider class represents a managed cryptographic provider of the 

Data Encryption Standard (DES) symmetric algorithm. 

The DES symmetric algorithm is commonly used for dat confidentiality, and it supports 64- bit keys. 

When you instantiate a TripleDESCryptoServiceProvider object, a secret key for encryption and an initialization 

vector (IV) are created. 

Because the same key and IV are needed for encryption and decryption, the CreateEncryptor and 

CreateDecryptor methods 

generate the appropriate ICryptoTransform object to alter the data. 

Incorrect Answers: 

A: You should not use the code that does not invoke the CreatDecryptor method because this is required when 

instantiating a CryptoStream object. 

C, D: You should not use the code fragments that invoke the Decrypt method because no such method exists 

in the CryptoStream class. 

■ Tipp: 

■ CryptoSream cs = new CryptoSream(ms, secretKey.CreateDecryptor(), CryptoSreamMode.Read); 

■ ist der einzige korrekte Konstruktor (C wurde ausgebessert). 

■ Methode Read und nicht Decrypt - schon gar nicht von MemoryStream !!! 

■ public CryptoStream (Stream stream, ICryptoTransform transform, CryptoStreamMode mode) 

■ transform: Die kryptografische Transformation, die fur den Stream ausgefuhrt werden soil. (SecretKey. 
CreateEncryptor()) 

■ die verschiedenen XXXCryptoServiceProvider haben alle eine Methode CreateEncryptor bzw. 
CreateDecryptor. 

QUESTION 53 

You are developing an application to perform mathematical calculations. 

You develop a class named CalculationValues. 

You write a procedure named PerformCalculation that operates on an instance of the class. 

You need to ensure that the user interface of the application continues to respond while calculations are being 

performed. 

You need to write a code segment that calls the PerformCalculation procedure to achieve this goal. 

Which code segment should you use? 



A. private void PerformCalculation() {...} 
private void DoWork(){ 

CalculationValues myValue = new CalculationValues(); 

Thread newThread = new Thread(new ThreadStart(performCalculation)); 

newThread.Start(myValues); 

} 

B. private void PerformCalculation() {...} 
private void DoWork(){ 

CalculationValues myValue = new CalculationValues(); 

ThreadStart delStart = new ThreadStart(PerformCalculation); 

Thread newThread = new Thread(delStart); 

if (newThread. IsAlive) {newThread. Start(myValue);} 

} 

C. private void PerformCalculation (CalculationValues values) {...} 
private void DoWork(){ 

CalculationValues myValue = new CalculationValues(); 

Application. DoEvents(); 

PerformCalculation(myValue); 

Application. DoEvents(); 

} 

D. private void PerformCalculation(object values) {...} 
private void DoWork(){ 

CalculationValues myValues = new CalculationValues(); 

Thread newThread = new Thread(new ParameterizedThreadStart(PerformCalculation)); 

newThread. Start(myValues); 

i 

Answer: D 
Section: (none) 

Explanation/Reference: 

Explanation: It is a requirement that the Ul continues to respond, hence PerformCalculation should execute in a 

separate thread. 

PerformCalculation requires a parameter hence you should use the ParameterizedThreadStart delegate. 

A& B attempt to supply a parameter to the ThreadStart delegate. This is not possible. 

C Does not run in a new thread and hence may leave the Ul unresponsive. 

■ Warum ist es sicher, dass Parameter benotigt werden (geht aus der Angabe nicht hervor) !!! 



